Cyber Security Manager (AWS/ISO 27001) - Portugal Full Remote

HumanIT Digital Consulting

Lisboa

Remote

EUR 26,000 - 34,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

15th month salary

Health insurance for family

Birthday off

Mobility program for digital nomads

Real work-life balance

Job summary

HumanIT Digital Consulting is hiring a Cyber Security Manager to lead the security program for a fintech platform in Portugal, working with AI-native security tooling and AWS services. The role combines hands-on security leadership with regulatory compliance across GDPR, PCI DSS and ISO 27001, in a fast-moving startup context backed by an established group.

You will drive risk management, vulnerability triage and AI-enabled security workflows while coordinating with UK-based stakeholders.

Qualifications

Proven experience in Cyber Security / Information Security.
Hands-on experience using AI tools and agents for threat analysis, vulnerability triage, policy drafting, reporting and automation.
Strong working knowledge of AWS security services: Security Hub, Control Tower, Organizations, SCPs, IAM, account security, Macie and GuardDuty.
Strong understanding of compliance requirements: DPA, GDPR, PCI DSS v4.0, SOC 1, SOC 2 and ISO/IEC 27001.
Knowledge of OWASP Top 10 for LLM Applications (2025) and ISO/IEC 42001.
Strong understanding of AI security risks, including prompt injection, data leakage and model misuse.
Good awareness of current threats, emerging vulnerabilities and zero-day exploits, and how to mitigate them.
Solid grasp of security risk assessment methodologies: identifying, assessing, prioritising and managing risk.
Experience managing third-party suppliers and vendor risk, including assessment of AI tools and vendors.
Experience developing security policies, procedures, governance frameworks and strategies.
Ability to troubleshoot security incidents and design effective risk mitigation.
Strong stakeholder management and communication skills, with the ability to explain complex security topics to technical and non-technical audiences.
Comfortable in an agile, fast-moving start-up environment, with a curious, decisive and delivery-focused approach.
Fluent English (written and spoken), essential for daily work with UK-based stakeholders.

Responsibilities

Lead cybersecurity risk, governance and compliance programs.
Oversee vulnerability management and patching with AI tools.
Define and implement AI-driven security workflows and policy drafting.
Ensure regulatory obligations are met across GDPR, PCI DSS, SOC 1/2 and ISO 27001.
Shaping the Cyber Security strategy and secure AI adoption across the business.
Coordinate security KPI definition, reporting and escalation with AI support.
Collaborate with technology and financial services teams during platform go-live.

Skills

Cyber Security

Information Security

AI tooling

AWS Security

Stakeholder management

English fluency

Tools

AWS Security Hub

Control Tower

GuardDuty

Macie

IAM

Job description

Cyber Security Manager (AWS/ISO 27001) - Portugal Full Remote

ABOUT THE OPPORTUNITY

Join a brand-new fintech start-up division backed by a well-established UK digital retail and financial services group, and help build a secure financial services platform from the ground up. You’ll lead cybersecurity risk, vulnerability management, governance and compliance, using AI tools and agents to automate threat analysis, vulnerability triage, reporting and policy development. This is a hands‑on leadership role for someone who wants to define what AI‑native security looks like in a regulated environment, with start‑up speed and the stability of an established group behind it.

PROJECT & CONTEXT

The group is running a major technology transformation programme covering a new website, order management, customer service and a new credit platform. The fintech division’s platform is preparing for a staged go‑live, so you’ll join at a critical moment, working across technology and Financial Services teams. Your main responsibilities will include:

Managing ongoing cybersecurity commitments, delivering operational security controls, risk and governance frameworks, and Information Security standards
Delivering the InfoSec technology roadmap while ensuring regulatory obligations are met
Shaping the Cyber Security strategy, including the secure adoption of AI across the business
Running vulnerability and patch management programmes, using AI agents to triage findings, assess exploitability and draft remediation
Designing and continuously improving AI‑driven security workflows: alert triage, automated compliance evidence collection and third‑party risk assessment
Identifying emerging threats through AI‑driven threat intelligence, and ensuring security data is continuously collected, correlated and analysed
Defining security KPIs and automating management reporting, escalations and metric analysis with AI
Building and maintaining security policies and procedures, using AI to draft content and map controls against frameworks
Preparing the platform for go‑live, with security support processes integrated into the wider group
Acting as the Cyber Security SME for stakeholders and promoting a culture of continuous improvement

WHAT WE’RE LOOKING FOR (Required)

Proven experience in Cyber Security / Information Security
Hands‑on experience using AI tools and agents (e.g. Claude, Microsoft Security Copilot or similar) for threat analysis, vulnerability triage, policy drafting, reporting and automation
Strong working knowledge of AWS security services: Security Hub, Control Tower, Organizations, SCPs, IAM, account security, Macie and GuardDuty
Strong understanding of compliance requirements: DPA, GDPR, PCI DSS v4.0, SOC 1, SOC 2 and ISO/IEC 27001
Knowledge of OWASP Top 10 for LLM Applications (2025) and ISO/IEC 42001
Strong understanding of AI security risks, including prompt injection, data leakage and model misuse
Good awareness of current threats, emerging vulnerabilities and zero‑day exploits, and how to mitigate them
Solid grasp of security risk assessment methodologies: identifying, assessing, prioritising and managing risk
Experience managing third‑party suppliers and vendor risk, including assessment of AI tools and vendors
Experience developing security policies, procedures, governance frameworks and strategies
Ability to troubleshoot security incidents and design effective risk mitigation
Strong stakeholder management and communication skills, with the ability to explain complex security topics to technical and non‑technical audiences
Comfortable in an agile, fast‑moving start‑up environment, with a curious, decisive and delivery‑focused approach
Fluent English (written and spoken), essential for daily work with UK‑based stakeholders

NICE TO HAVE (Preferred)